Microsoft Windows Server Version 20H2 vulnerabilities

966 known vulnerabilities affecting microsoft/windows_server_version_20h2.

Total CVEs
966
CISA KEV
39
actively exploited
Public exploits
17
Exploited in wild
44
Severity breakdown
CRITICAL44HIGH690MEDIUM229LOW3

Vulnerabilities

Page 25 of 49
CVE-2021-40488HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-40488 [HIGH] CWE-269 CVE-2021-40488: Storage Spaces Controller Elevation of Privilege Vulnerability Storage Spaces Controller Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2021-41346HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-41346 [HIGH] CVE-2021-41346: Console Window Host Security Feature Bypass Vulnerability Console Window Host Security Feature Bypass Vulnerability
cvelistv5nvd
CVE-2021-40462HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-40462 [HIGH] CVE-2021-40462: Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2021-40464HIGHCVSS 8.0≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-40464 [HIGH] CWE-269 CVE-2021-40464: Windows Nearby Sharing Elevation of Privilege Vulnerability Windows Nearby Sharing Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2021-40476HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-40476 [HIGH] CWE-522 CVE-2021-40476: Windows AppContainer Elevation Of Privilege Vulnerability Windows AppContainer Elevation Of Privilege Vulnerability
cvelistv5nvd
CVE-2021-40456HIGHCVSS 7.5≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-40456 [HIGH] CWE-863 CVE-2021-40456: Windows AD FS Security Feature Bypass Vulnerability Windows AD FS Security Feature Bypass Vulnerability
cvelistv5nvd
CVE-2021-40477HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-40477 [HIGH] CWE-269 CVE-2021-40477: Windows Event Tracing Elevation of Privilege Vulnerability Windows Event Tracing Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2021-40450HIGHCVSS 7.8KEV≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-40450 [HIGH] Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2021-40467HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-40467 [HIGH] CWE-269 CVE-2021-40467: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2021-40470HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-40470 [HIGH] CWE-269 CVE-2021-40470: DirectX Graphics Kernel Elevation of Privilege Vulnerability DirectX Graphics Kernel Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2021-36970HIGHCVSS 8.8≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-36970 [HIGH] Windows Print Spooler Spoofing Vulnerability Windows Print Spooler Spoofing Vulnerability Windows Print Spooler Spoofing Vulnerability
cvelistv5
CVE-2021-41330HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-41330 [HIGH] CVE-2021-41330: Microsoft Windows Media Foundation Remote Code Execution Vulnerability Microsoft Windows Media Foundation Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2021-41347HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.12882021-10-13
CVE-2021-41347 [HIGH] CWE-269 CVE-2021-41347: Windows AppX Deployment Service Elevation of Privilege Vulnerability Windows AppX Deployment Service Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2021-40469HIGHCVSS 7.2≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-40469 [HIGH] CVE-2021-40469: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2021-40478HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-40478 [HIGH] CWE-269 CVE-2021-40478: Storage Spaces Controller Elevation of Privilege Vulnerability Storage Spaces Controller Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2021-26442HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-26442 [HIGH] CVE-2021-26442: Windows HTTP.sys Elevation of Privilege Vulnerability Windows HTTP.sys Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2021-41340HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-41340 [HIGH] CVE-2021-41340: Windows Graphics Component Remote Code Execution Vulnerability Windows Graphics Component Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2021-41334HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-41334 [HIGH] CWE-269 CVE-2021-41334: Windows Desktop Bridge Elevation of Privilege Vulnerability Windows Desktop Bridge Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2021-41337MEDIUMCVSS 4.9≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-41337 [MEDIUM] CVE-2021-41337: Active Directory Security Feature Bypass Vulnerability Active Directory Security Feature Bypass Vulnerability
cvelistv5nvd
CVE-2021-40460MEDIUMCVSS 6.5≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-40460 [MEDIUM] CVE-2021-40460: Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability
cvelistv5nvd